$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa File: 5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa (raw, json) Hash identifier: 6ofRuzNBvUWFgg7bssge7gPoA+DbPzSCeSiF2mXgZyA= Subject key identifier: 2B:79:37:89:79:96:BE:0A:32:ED:9D:C8:CB:38:77:FE:5E:20:D1:D0 Certificate issuer: /CN=8583e379-1578-4044-8426-ddcb4a4a8192 Certificate serial: 010D0C9F432858489D05E5A262454A550D9BD080 Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 64200 IP address blocks: 67.21.34.0/23 maxlen: 24 192.154.192.0/21 maxlen: 24 192.154.208.0/22 maxlen: 24 192.154.212.0/24 maxlen: 24 192.154.215.0/24 maxlen: 24 192.154.216.0/21 maxlen: 24 192.154.232.0/21 maxlen: 24 192.154.240.0/24 maxlen: 24 192.154.242.0/23 maxlen: 24 192.154.244.0/22 maxlen: 24 192.154.249.0/24 maxlen: 24 192.154.251.0/24 maxlen: 24 192.154.252.0/24 maxlen: 24 199.188.88.0/21 maxlen: 24 2604:8180::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e5:a2:62:45:4a:55:0d:9b:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192 Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=47b39b70-5d27-4fa0-ab42-7d3953999872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:7c:15:9f:f7:eb:ec:0c:e0:8b:9e:12:d9: dc:e0:97:59:cb:62:16:a6:57:35:27:bf:ea:a6:d1: a7:5a:71:ab:70:4f:cf:a6:5e:31:d9:a6:cd:a2:bd: ef:27:a6:ff:86:e3:88:91:b8:77:3e:62:90:f8:15: 1b:45:f9:cd:1b:0d:9f:bd:b3:a4:c3:75:2c:b2:cb: 95:c4:9f:41:40:d8:97:ab:0d:a8:f5:08:86:31:f5: fd:b8:b3:f3:3d:2b:e1:23:b6:0e:6a:a9:1b:3e:0c: 07:b7:59:35:65:c2:40:57:51:b1:d4:ce:c7:ba:f9: f0:53:8e:40:b2:21:de:ae:7c:ca:ea:41:7a:45:54: 1d:3f:4b:f5:de:0b:af:eb:bd:66:44:7d:70:eb:29: f7:34:0f:c9:60:3b:47:ec:9d:3e:38:b9:7e:d3:ea: 2d:3d:d3:0e:c1:5b:a8:9c:8a:87:e7:5b:e1:a0:43: 6b:67:7a:7d:54:46:1e:d2:16:f9:60:d3:fd:38:d1: 2f:ef:c2:62:ab:9c:85:ae:61:71:ac:80:9e:10:20: 68:43:c3:68:f2:06:f8:6d:98:0f:bf:b0:e9:0e:97: 5d:0b:a7:c2:c7:98:57:37:1a:bd:57:18:d0:ae:d4: 5c:d1:1f:d8:17:61:f5:c4:4f:c2:20:0b:00:b1:37: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:37:89:79:96:BE:0A:32:ED:9D:C8:CB:38:77:FE:5E:20:D1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/5339e6b4-20a4-3e12-b267-e7013b1ce0d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl X509v3 Authority Key Identifier: keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer sbgp-ipAddrBlock: critical IPv4: 67.21.34.0/23 192.154.192.0/21 192.154.208.0-192.154.212.255 192.154.215.0-192.154.223.255 192.154.232.0-192.154.240.255 192.154.242.0-192.154.247.255 192.154.249.0/24 192.154.251.0-192.154.252.255 199.188.88.0/21 IPv6: 2604:8180::/31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c6:f2:59:50:56:6a:ae:8d:87:2e:5b:4c:75:be:8d:55:fd: 3f:ec:91:94:69:c6:37:30:5b:d9:f9:15:e4:c2:c6:62:bf:20: be:f2:34:01:96:52:ae:30:fa:d6:e8:05:ef:c3:8c:5c:93:b3: fc:5b:09:a6:8c:d2:4c:fe:fd:64:67:67:a4:d5:91:42:04:02: d3:6d:2f:7f:60:ac:a6:91:c5:a4:81:4f:24:2a:af:c4:d8:38: 47:f9:be:84:05:27:07:b0:28:da:a0:ae:c3:cf:c0:bd:a3:83: 68:74:9f:0b:27:d3:f7:16:13:5b:f5:c9:59:5b:51:1c:ca:88: ca:eb:0d:75:a1:c8:10:c2:09:94:a7:44:73:98:94:6c:23:db: ed:c6:1a:a6:dc:78:76:4d:99:e6:c4:27:7e:16:e8:a2:dd:7d: 58:a6:23:9b:07:ae:9d:6c:75:19:4d:98:63:a2:5b:fa:31:6c: 7b:64:eb:59:32:b0:ee:9c:96:05:dd:20:32:a3:32:3b:f3:3e: ad:80:bb:b5:59:50:18:2c:4a:85:31:4f:43:2c:4e:c9:65:d6: 74:80:b6:58:90:01:ef:ed:ef:4a:40:d0:cb:e3:0b:9f:1d:5e: f5:b2:57:88:0a:11:b9:b0:67:73:57:7c:61:a2:ab:5f:86:e6: 1a:18:79:57 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUAQ0Mn0MoWEidBeWiYkVKVQ2b0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4M2UzNzktMTU3OC00MDQ0LTg0MjYtZGRjYjRhNGE4 MTkyMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDdiMzliNzAtNWQyNy00ZmEwLWFiNDItN2QzOTUzOTk5ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW58FZ/36+wM4IueEtnc4JdZy2IWplc1J7/q ptGnWnGrcE/Ppl4x2abNor3vJ6b/huOIkbh3PmKQ+BUbRfnNGw2fvbOkw3UsssuV xJ9BQNiXqw2o9QiGMfX9uLPzPSvhI7YOaqkbPgwHt1k1ZcJAV1Gx1M7HuvnwU45A siHernzK6kF6RVQdP0v13guv671mRH1w6yn3NA/JYDtH7J0+OLl+0+otPdMOwVuo nIqH51vhoENrZ3p9VEYe0hb5YNP9ONEv78Jiq5yFrmFxrICeECBoQ8No8gb4bZgP v7DpDpddC6fCx5hXNxq9VxjQrtRc0R/YF2H1xE/CIAsAsTcb5QIDAQABo4IDvTCC A7kwHQYDVR0OBBYEFCt5N4l5lr4KMu2dyMs4d/5eINHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NTgz ZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0YTgxOTIvNTMzOWU2YjQtMjBhNC0z ZTEyLWIyNjctZTcwMTNiMWNlMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODU4M2UzNzktMTU3OC00MDQ0LTg0 MjYtZGRjYjRhNGE4MTkyLzg1ODNlMzc5LTE1NzgtNDA0NC04NDI2LWRkY2I0YTRh ODE5Mi5jcmwwHwYDVR0jBBgwFoAUicdfP86nXQ3DEPkjLGWSJwxjHWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNi NGE0YTgxOTIuY2VyMIGGBggrBgEFBQcBBwEB/wR3MHUwZAQCAAEwXgMEAUMVIgME A8CawDAMAwQEwJrQAwQAwJrUMAwDBADAmtcDBAXAmsAwDAMEA8Ca6AMEAMCa8DAM AwQBwJryAwQDwJrwAwQAwJr5MAwDBADAmvsDBADAmvwDBAPHvFgwDQQCAAIwBwMF ASYEgYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAi8byWVBWaq6Nhy5bTHW+jVX9P+yRlGnGNzBb2fkV5MLG Yr8gvvI0AZZSrjD61ugF78OMXJOz/FsJpozSTP79ZGdnpNWRQgQC020vf2CsppHF pIFPJCqvxNg4R/m+hAUnB7Ao2qCuw8/AvaODaHSfCyfT9xYTW/XJWVtRHMqIyusN daHIEMIJlKdEc5iUbCPb7cYaptx4dk2Z5sQnfhboot19WKYjmweunWx1GU2YY6Jb +jFse2TrWTKw7pyWBd0gMqMyO/M+rYC7tVlQGCxKhTFPQyxOyWXWdIC2WJAB7+3v SkDQy+MLnx1e9bJXiAoRubBnc1d8YaKrX4bmGhh5Vw== -----END CERTIFICATE-----Generated at Thu Apr 10 05:28:14 2025 by rpki-client